topic Re: Destination NAT with multiple server. in General Topics

Destination NAT with multiple server.

Jafar_Hussain — Thu, 23 Apr 2020 10:50:22 GMT

Hello Team,

I have configured destination NAT in my environment with one server.

Now i can see the number of users increases and too much traffic i am getting in one server, so i want to configure 2 more server with the same services.

For example:-

If user 1 want to connect my destination it will translate to 10.0.0.1

If user 2 want to connect my destination it will translate to 10.0.0.2

If user 3 want to connect my destination it will translat to 10.0.0.3

please let me know how i can achieve this requirement.

Re: Destination NAT with multiple server.

SutareMayur — Thu, 23 Apr 2020 10:59:21 GMT

@Jafar_Hussain,

Currently you can't achieve it on Palo Alto. You need something like Load Balancer to achieve this requirement.

Mayur

Re: Destination NAT with multiple server.

Jafar_Hussain — Thu, 23 Apr 2020 11:08:04 GMT

@SutareMayur

Thanks for your reply.

I have gone through these documents and found this:-

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-new-features/networking-features/session-dist-dnat.html

can we create like this create a one address object with interface range (10.0.0.1-10.0.0.3) and the same object we can allow in destination NAT and we will select the round-robin method?

Please suggest this.

Re: Destination NAT with multiple server.

SutareMayur — Thu, 23 Apr 2020 11:25:24 GMT

@Jafar_Hussain,

Yes you can give a try, as per the article it should work. I haven't tried it yet.

Mayur

Re: Destination NAT with multiple server.

Wagdy-Maher — Thu, 09 May 2024 05:31:29 GMT

you can achive this using user-id as a source address in the nat and create a policy to allow this traffic.